Two Shooters, Four Radio Channels, and a School Four Hundred Meters Away
Saturday, 1510. Shots fired at a 1.1-million-square-foot regional mall with roughly 120 tenants and an estimated 4,000 shoppers. Initial calls describe two shooters. Your department has 42 sworn officers and 6 on duty. County sheriff's units are 30 minutes out; state police are 25 minutes out; three fire and EMS agencies are responding. A public elementary school sits 400 meters from the north entrance. Your first four officers make entry at 1519. At 1528 a store manager reports the shooter in the food court; a separate caller reports shots at the west entrance. Four different talkgroups are in use and units are stepping on each other. Body-worn cameras are streaming live to the media. A news helicopter is orbiting overhead. The county EOC activates at 1540. You arrive on scene at 1526 and take command. At 1605 the FBI special agent in charge offers to assume command, and the state police colonel arrives and states that his agency is taking over the scene.
1. Describe your priorities and command decisions for the first 30 minutes on scene.
Read the worked answer
Life safety first, and command second - but command has to exist immediately or the life-safety work will collide with itself. On arrival I establish a command post outside the structure with line-of-sight to the north and west approaches, well away from the entrances, and I make a single radio declaration with my name, location, and the fact that I am incident commander. I direct all units to a designated talkgroup and have dispatch announce it twice.
The four officers who entered at 1519 are my contact team. I do not send them to the food court and the west entrance simultaneously on two conflicting reports; the food court report is from a manager who is likely on scene and the west entrance report may be the same event reflected. The team moves to contact, and my instruction to them is to stop the killing, not to treat the wounded, and to report when the threat is neutralized or they have lost contact.
With six officers on duty, I form a second contact team from mutual aid as it arrives rather than stripping the perimeter. I assign a staging area with a single entry point and a staging manager, because 60-plus units arriving without a traffic cop will gridlock the access road. I request fire and EMS into unified command and set up rescue task forces to work warm zones behind the contact teams, with a casualty collection point on the far side of the building.
The school is the decision I would make first if I had to choose. Four hundred meters away with an unresolved shooter location, the school goes to lockdown, not evacuation - evacuating children into the parking lot moves them toward the scene and creates a second mass of targets. I send a marked unit with a radio to the school to serve as liaison, and I tell the principal directly.
Media: the PIO goes to a designated media staging area, and I ask the helicopter to move back because its rotor noise is drowning out the radio traffic my officers on scene need to hear.
2. At 1605 the FBI offers command and the state police colonel asserts command. How do you handle the dispute?
Read the worked answer
Handle it in person, in thirty seconds, and not on the radio. A command dispute broadcast over an open channel is the fastest way to paralyze 60 responding units who will each pick the commander they prefer.
The principle I would apply: command is not a trophy, it is an assignment with legal and practical authority behind it. The local jurisdiction normally retains command of an incident inside its borders, and the colonel's assertion does not change that by itself - he may have a state statute in mind, and I need to hear it, but I am not surrendering command on the strength of an arrival. The FBI's role depends on whether there is a federal predicate - terrorism, a federal facility, or an interstate element. Absent that, the FBI's natural role is intelligence, a Joint Operations Center, and victim assistance, not tactical command.
The answer to both is unified command under NIMS: I retain incident command of the incident, the fire chief and EMS chief are co-commanders for their functions, the state police take command of the outer perimeter and traffic, and the FBI takes the intelligence and investigation function. Each of those is written on the ICS-201 with names and time stamps. If the colonel genuinely has statutory authority, I ask him to state the citation and I will transfer command formally using a transfer-of-command briefing rather than having two commanders; what I will not do is operate in an ambiguous arrangement where nobody knows who decides.
If the dispute persists, I escalate to the chief of police and the city manager on a private channel and ask them to resolve it at their level. I document what I did and when. The incident does not stop for the argument, so everything below the command level continues while the principals sort it out.
3. At 1630 the public information officer asks whether to release the number of dead and the name of the suspect. What guidance do you give?
Read the worked answer
Give the PIO a rule, not a case-by-case approval chain, because the next two hours will be chaos.
On casualty numbers: confirm only what a credible source has verified - the medical examiner for the dead, the hospital for the transported. If the number is 3 confirmed dead and 7 transported and I expect it to change, I say exactly that: 'We can confirm three deceased and seven transported; this is early and these numbers may change.' Do not release a number that includes unverified reports from the radio, and do not release a number that excludes people still inside. The correction will be remembered longer than the original.
On the suspect's name: release the name only after (a) identity is confirmed by a reliable means, not a wallet, and (b) notification of next of kin is complete or has been attempted and documented. If the suspect is deceased, the coroner releases identity in many jurisdictions; coordinate rather than compete, and have one voice say it. Never name a suspect who has not been charged and located, and never release a juvenile victim's name.
On the rest: no tactical positions, no entry points, no officer identities, no images of the dead. Explain the withholding as protective of the investigation and of families, and give the reason each time.
Set up rumor control as a function with a named person, monitor social media for the two or three claims that are actually spreading, and correct those specifically rather than issuing general denials. The media will report the helicopter footage regardless, so the PIO should be describing what people will see before they see it.